Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OuvsoHfX5upHMK6mlxlOLtN5tpU.roa
File: OuvsoHfX5upHMK6mlxlOLtN5tpU.roa (raw, json)
Hash identifier: 6zfuOGzWP2auOFaNFY3CcJOMjsrTfPoxkCUqCvQdizU=
Subject key identifier: 3A:EB:EC:A0:77:D7:E6:EA:47:30:AE:A6:97:19:4E:2E:D3:79:B6:95
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0189B0DD17B41A82A83C4F4FC11C9CAA9A4E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OuvsoHfX5upHMK6mlxlOLtN5tpU.roa
Signing time: Tue 01 Aug 2023 11:30:26 +0000
ROA not before: Tue 01 Aug 2023 11:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 212.111.207.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
77.47.159.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
77.47.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 10:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:dd:17:b4:1a:82:a8:3c:4f:4f:c1:1c:9c:aa:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 1 11:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aebeca077d7e6ea4730aea697194e2ed379b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:36:30:08:6e:f3:39:d4:e5:fa:e1:b7:c6:3b:
0d:29:95:24:83:18:8e:ae:91:44:b7:0b:ae:ce:19:
75:d1:5d:ac:55:7d:8e:9c:82:c0:9d:49:7e:7f:0e:
df:e0:e0:97:81:e0:80:2d:69:90:5e:4b:b5:3a:ec:
7a:ba:62:4c:3d:fe:ee:f5:3d:7e:1e:b9:23:81:34:
26:89:fb:d0:ef:74:53:0f:64:6a:1d:67:07:43:db:
4e:62:ae:51:c6:3e:6b:e8:d9:bc:09:1e:6c:64:d4:
c0:5a:12:33:85:a8:f7:31:68:5b:28:8f:a4:68:cb:
2e:26:31:1a:f6:d8:c2:2d:29:7b:a8:48:a5:67:63:
a4:68:38:78:2e:f0:c3:a6:64:12:bd:15:3b:0d:99:
6c:46:8e:a0:ef:d9:77:55:17:26:a6:ff:88:10:ec:
fc:4b:c6:37:60:72:36:1c:73:e2:f7:6e:04:b7:ec:
63:87:7e:db:e5:cf:6e:b0:48:9e:7b:f1:57:14:b4:
8e:fd:5c:05:7d:86:07:c7:e0:9a:b3:8b:62:b1:bc:
4b:e3:64:f9:fe:4a:8f:da:94:fc:23:80:c5:99:ea:
e1:cd:95:5a:10:23:0b:4b:3a:f9:8b:e2:ad:b6:e8:
bb:b4:ee:aa:26:28:94:bf:63:0d:63:e9:41:e8:4c:
bb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:EC:A0:77:D7:E6:EA:47:30:AE:A6:97:19:4E:2E:D3:79:B6:95
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/OuvsoHfX5upHMK6mlxlOLtN5tpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.159.0/24
77.47.178.0/24
185.143.56.0/22
195.178.140.0/24
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:58:6d:53:8b:7f:88:2b:ed:0c:1c:e3:7e:2f:69:bb:38:ce:
be:e3:26:af:e4:4f:12:9d:0a:3e:72:f7:d9:44:c7:6e:c8:22:
76:4f:a5:5f:54:51:2c:26:9b:68:45:9a:ec:9d:21:7a:e6:7c:
be:3e:2b:fe:0f:e9:7b:d5:f0:58:f3:47:29:66:b8:51:db:0d:
a4:07:e5:ed:56:a2:f4:79:f3:ca:a6:ed:c9:18:2f:de:23:18:
bc:62:d0:b0:98:4c:fb:80:48:8f:fd:41:9b:77:f3:c4:06:33:
84:80:6e:40:b6:56:4f:bc:5c:a1:4d:a0:29:cf:b4:9b:cd:5e:
fa:44:a1:35:96:22:3f:b1:47:4f:ec:54:1a:46:9e:02:71:42:
a1:f7:ae:a0:ce:34:3e:c7:77:7f:d7:7b:3e:76:03:b9:7c:bf:
e1:c9:a9:d8:93:30:f7:f6:03:9e:f9:42:be:62:de:73:a9:7b:
70:36:b3:07:ab:d3:bc:70:ff:59:9d:cb:09:f6:84:e1:ab:fe:
89:61:37:e7:ea:f3:e9:48:7b:a9:67:e3:98:f2:74:c8:ad:0e:
6b:1b:d4:7f:58:8e:78:99:28:ba:7c:99:b2:dd:2f:a6:be:c5:
92:5a:d2:6a:e4:80:42:8e:a5:da:68:2e:fb:84:74:99:d6:5a:
7b:bf:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org